threema-ch / threema-web

The Threema Web application.
GNU Affero General Public License v3.0
984 stars 104 forks source link

Replace cryptography with something better #1186

Open paulmillr opened 8 months ago

paulmillr commented 8 months ago

tweetnacl:

  1. Was audited
  2. Accepts forged signatures with $S >= L$, doesn't have SUF-CMA
  3. Is slow

noble-curves:

  1. Was also audited
  2. Does not accept forged signatures
  3. Is much faster
  4. Has readable codebase instead of low-level garbage